[Snort-users] "S5 pruned sessions from cache" messages

Joe S js.lists at ...11827...
Tue Apr 29 13:50:09 EDT 2008


I'm running Snort 2.8.0.1 on FreeBSD 7.0 (i386) and I'm getting tons
of messages like this:

S5: Pruned 25 sessions from cache. 2870 ssns for memcap: 8387663/8388608
S5: Pruned 5 sessions from cache. 2877 ssns for memcap: 8235241/8388608
S5: Pruned 20 sessions from cache. 2964 ssns for memcap: 8388299/8388608
S5: Pruned 5 sessions from cache. 2959 ssns for memcap: 8388559/8388608
S5: Pruned 5 sessions from cache. 2954 ssns for memcap: 8387708/8388608
S5: Pruned 5 sessions from cache. 2947 ssns for memcap: 8387840/8388608
S5: Pruned 70 sessions from cache. 2877 ssns for memcap: 8387838/8388608
S5: Pruned 15 sessions from cache. 2862 ssns for memcap: 8388366/8388608
S5: Pruned 25 sessions from cache. 2837 ssns for memcap: 8388348/8388608
S5: Pruned 10 sessions from cache. 2827 ssns for memcap: 8388233/8388608
S5: Pruned 5 sessions from cache. 2822 ssns for memcap: 8387495/8388608
S5: Pruned 5 sessions from cache. 2817 ssns for memcap: 8360849/8388608
S5: Pruned 5 sessions from cache. 2826 ssns for memcap: 8388047/8388608
S5: Pruned 35 sessions from cache. 2793 ssns for memcap: 8387029/8388608

I've searched the archives, but have not found anything.

Why am I getting these messages?
What do they mean?




More information about the Snort-users mailing list